Description Roundcube Webmail through 1.3.9 mishandles Punycode xn-- domain names, leading to homograph attacks. Remediation References CVE-2019-15237 Related Vulnerabilities WordPress Plugin Booster for WooCommerce Multiple Cross-Site Scripting Vulnerabilities (5.4.8) WordPress Plugin Frontend File Manager Multiple Vulnerabilities (21.2) WordPress Plugin Dropshix Security Bypass (4.0.13) WordPress Plugin Contact Form by Supsystic Multiple Vulnerabilities (1.7.5) WordPress Plugin WP Rss Poster SQL Injection (1.0.0) Severity High Classification CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N Tags Missing Update Known Vulnerabilities CVE-2019-15237